Privacy Policy
This Privacy Policy describes how International Virtual PreSchool (IV Preschool)
processes personal information in the School Portal at
portal.ivpreschool.com
and the mobile app package com.ivpreschool.portal.
Effective date: 14 October 2026
Last updated: 14 October 2026
1. Who we are
IV Preschool operates an online preschool learning portal for enrolled families and authorized school staff. The portal is used for admissions, live classes, academic work, fees, results, certificates, notices, and support.
School identity shown in the portal and official documents uses the name International Virtual PreSchool / IV Preschool. Document settings (school website, verify base URL, and contact fields) may be configured by authorized administrators inside the portal.
2. Information we process
Depending on your role and what you submit, the portal may process:
- Parent / guardian account data: name, email address, phone / WhatsApp number, profile photo, account status, and authentication records.
- Children’s information: name, date of birth or age-related fields as collected on admission forms, grade/section, roll number, photographs, and linked family relationships.
- Admission materials: family admission applications, identity document type/uploads where requested, notes to admin, and approval / rejection decisions.
- Account security data: email one-time passcodes (OTP), password authentication via Firebase Authentication, and optional device app-lock preferences on supported devices.
- Attendance: student attendance marks (for example Present, Absent, Late, Leave, Half Leave) entered by authorized teachers/staff and visible to linked parents.
- Learning activity: homework and classwork assignments, uploads (images/PDF), review status (submitted, under review, approved, rejected), worksheets, oral work, lesson plans, and class recordings metadata/links.
- Assessments: exam schedules/datesheets, syllabi, results, result cards, certificate requests, and issued certificate records.
- Fees: fee balances, payment proof uploads, review decisions, and receipt/history records where enabled.
- Live class connection details: teacher Zoom ID, passcode, and/or link used for Join during the class window; class timetable times.
- Communications: notices, announcements, notifications, class chat messages where enabled, and support tickets with optional attachments.
- Technical logs: service logs and crash diagnostics used to operate and secure the portal (for example Firebase Crashlytics where enabled).
3. Why we process data
- Create and secure parent and staff accounts
- Process family admission and child enrollment
- Deliver timetable, live Zoom class access, and academic materials
- Record attendance, homework/classwork, exams, results, and certificates
- Track fee status and review payment proofs submitted by families
- Send operational notices and notifications
- Respond to support requests and maintain school administration records
- Protect the service against abuse and investigate security issues
4. Who can access school data
Access is role-based. Parents generally see information for their linked children. Teachers and staff see modules granted by their roles and live permission templates (for example admissions, attendance, fees, reports, or support). Super Admin accounts can access school-wide administration tools.
Authorized school users may review personal information as needed to operate the school. We do not claim that every record is invisible to all administrators.
5. Service providers and integrations
The portal uses third-party infrastructure. Actual integrations in the codebase include:
- Google Firebase / Google Cloud for Authentication, Firestore, Cloud Storage, Cloud Functions, Hosting, Cloud Messaging, and Crashlytics (project
ivpreschool). - Email delivery over SMTP configured for OTP and transactional mail. The application is set up to use Resend-compatible SMTP settings (
SMTP_HOST,SMTP_USER,SMTP_FROM, and a secret password). The From address is environment-configured and is not treated as a public support inbox. - Zoom for live class meetings when teachers provide Zoom link/ID/passcode and parents use Join during the allowed window.
- Device platforms (Android, iOS, web browsers) for running the portal app and showing system notifications where permitted.
These providers process data according to their own terms and privacy policies and only as needed to deliver the configured services.
6. Storage and security practices
- Accounts authenticate with email and password through Firebase Authentication.
- Sensitive actions (for example some profile changes and account deletion) may require email OTP confirmation.
- Access to school modules is controlled by authenticated roles and permission checks in the application.
- Files such as payment proofs, homework uploads, and profile photos are stored in secured cloud storage paths used by the portal.
- No security measure is perfect. Users must keep passwords private and report suspected unauthorized access through Support.
7. Retention and deletion
This Privacy Policy still requires final owner review and does not claim legal counsel approval. It does not invent fixed retention timelines or promise automatic permanent erasure of every related record.
Account deletion policy (owner-approved principles): the school verifies account owner identity before deletion; eligible personal data may be removed; academic, attendance, exam, certificate, and financial records must not be permanently deleted without verification and consideration of applicable retention and legal requirements.
What the current Portal implementation does for parent self-service deletion: after email OTP confirmation (identity verification step), the parent account status is marked deleted (soft delete). The sign-in identity may remain so the recovery screen can still operate. Linked child records are not automatically removed by that self-delete flow. Authorized administrators may restore a soft-deleted parent account. A Super Admin hard-purge path exists for already soft-deleted parent accounts; it is a separate administrative action and is not the same as the in-app self-delete button.
See the Account Deletion page for request instructions.
8. Children’s privacy and parent consent
The portal is directed to parents/guardians and school staff for preschool education. Children’s information is collected through parent/guardian admission and school workflows. Parents/guardians are responsible for the accuracy of information they submit and for supervising a child’s use of devices during live classes and learning activities.
9. Your choices and requests
- Review and update profile information available in your account screens.
- Request corrections to official student records through Support (approved records may be read-only in the parent profile).
- Request account deletion using the in-app flow or the public Account Deletion instructions.
- Ask privacy questions through Support or the contacts listed below.
10. Policy updates
We may update this Privacy Policy when the portal, providers, or school practices change. The effective date above will be revised when a material update is published on this page. Continued use of the portal after an update means the updated policy applies to later use.
11. Contact for privacy questions
Use contacts that are actually configured in the current portal:
- In-app Support tickets (signed-in users): Portal → Support
- Email: admin@ivpreschool.com
- WhatsApp: +92 333 3750664
noreply@… sender addresses used for automated mail are not support inboxes.
Do not send privacy requests to automated no-reply addresses.
A dedicated postal mailing address and formal Data Protection Officer designation are not verified in the application configuration and are listed under owner review items for legal finalization.